CVE-2015-7852

EPSS 12.28%
Veröffentlicht 07.08.2017 20:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 12

NVD 46 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ntp ≫ Ntp Version >= 4.2.0 < 4.2.8

Ntp ≫ Ntp Version >= 4.3.0 < 4.3.77

Ntp ≫ Ntp Version4.2.8 Update-

Ntp ≫ Ntp Version4.2.8 Updatep1

Ntp ≫ Ntp Version4.2.8 Updatep1-beta1

Ntp ≫ Ntp Version4.2.8 Updatep1-beta2

Ntp ≫ Ntp Version4.2.8 Updatep1-beta3

Ntp ≫ Ntp Version4.2.8 Updatep1-beta4

Ntp ≫ Ntp Version4.2.8 Updatep1-beta5

Ntp ≫ Ntp Version4.2.8 Updatep1-rc1

Ntp ≫ Ntp Version4.2.8 Updatep1-rc2

Ntp ≫ Ntp Version4.2.8 Updatep2

Ntp ≫ Ntp Version4.2.8 Updatep2-rc1

Ntp ≫ Ntp Version4.2.8 Updatep2-rc2

Ntp ≫ Ntp Version4.2.8 Updatep2-rc3

Ntp ≫ Ntp Version4.2.8 Updatep3

Ntp ≫ Ntp Version4.2.8 Updatep3-rc1

Ntp ≫ Ntp Version4.2.8 Updatep3-rc2

Ntp ≫ Ntp Version4.2.8 Updatep3-rc3

Debian ≫ Debian Linux Version7.0

Debian ≫ Debian Linux Version8.0

Debian ≫ Debian Linux Version9.0

Netapp ≫ Oncommand Balance Version-

Netapp ≫ Oncommand Performance Manager Version-

Netapp ≫ Oncommand Unified Manager Version- SwPlatformclustered_data_ontap

Netapp ≫ Clustered Data Ontap Version-

Netapp ≫ Data Ontap Version- SwPlatform7-mode

Oracle ≫ Linux Version6 Update-

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Desktop Version7.0

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Server Version7.0

Redhat ≫ Enterprise Linux Server Aus Version7.3

Redhat ≫ Enterprise Linux Server Aus Version7.4

Redhat ≫ Enterprise Linux Server Aus Version7.6

Redhat ≫ Enterprise Linux Server Aus Version7.7

Redhat ≫ Enterprise Linux Server Eus Version7.3

Redhat ≫ Enterprise Linux Server Eus Version7.4

Redhat ≫ Enterprise Linux Server Eus Version7.5

Redhat ≫ Enterprise Linux Server Eus Version7.6

Redhat ≫ Enterprise Linux Server Eus Version7.7

Redhat ≫ Enterprise Linux Server Tus Version7.3

Redhat ≫ Enterprise Linux Server Tus Version7.6

Redhat ≫ Enterprise Linux Server Tus Version7.7

Redhat ≫ Enterprise Linux Workstation Version6.0

Redhat ≫ Enterprise Linux Workstation Version7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	12.28%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Third Party Advisory

http://www.debian.org/security/2015/dsa-3388

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2583.html

Third Party Advisory

https://security.gentoo.org/glsa/201607-15

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1033951

Third Party Advisory

VDB Entry

https://security.netapp.com/advisory/ntap-20171004-0001/

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0780.html

Third Party Advisory

http://support.ntp.org/bin/view/Main/NtpBug2919

Patch

Vendor Advisory

http://www.securityfocus.com/bid/77288

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-7852

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-7852

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-7852

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-7852